Methods for printing using an off-line policy-based printing system

ABSTRACT

A policy-based printing system is implemented to allow access to a private domain to print using a public domain. The private domain includes private servers that store documents. The public domain includes servers and a printing device. A public policy server uses a domain list and a protocol connection with a private authentication server to validate a user and identify which private domain to access. The public policy server receives requests from the printing device to process a print job of a document in the private domain. If the private server is off-line, then the printing device prints the document and a cost reimbursement request is submitted to account for the printed document.

FIELD OF THE INVENTION

The present invention relates to methods of using a system of privateand public servers that implement policy-based printing operations. Thesystem includes a public and private network that supports the policyused for printing operations, wherein the policy is implemented using aprivate server in the private network after printing is done in thesystem when the private server is not available.

DESCRIPTION OF THE RELATED ART

Existing policy-based printing systems mostly operate within a closedprivate domain environment. Print data submitted by users may be onlyaccessible within a single domain environment. Some users, such ason-the-go users including insurance and real estate agents, salesexecutives, lawyers, and company executives, require the capability toaccess printing data beyond an office environment. These users travelextensively and find themselves needing to print in public locations,such as convenience stores, libraries, airports, copy and printingservice stores, and the like. At these locations, the users may notreliably access the printing data. Further, these public locations maynot support policy-based printing.

SUMMARY OF THE INVENTION

A method for a printing system is disclosed. The method includesprinting a document at a printing device. The method also includesdetermining a cost for the printed document. The method also includesgenerating a cost reimbursement data file according to the cost using amobile application on a mobile device. The method also includesreceiving the cost reimbursement data file at a public server. Themethod also includes submitting the cost reimbursement data file to aprivate server when connected to the public server. The method alsoincludes associating the cost reimbursement data file to a ledger at theprivate server. The ledger corresponds to a policy for using theprinting device. The method also includes applying the policy to thecost reimbursement data file based on information from the ledger. Thepolicy is stored on the private server. The method also includesdetermining a payment for printing the document according to the policy.

A method for a printing system is disclosed. The method includesprinting a document at a printing device. The method also includesdetermining a cost for the printed document. The method also includesreceiving the cost using a mobile application on a mobile device. Themethod also includes sending the cost to a public server. The methodalso includes generating a cost reimbursement data file according to thecost at the public server. The method also includes submitting the costreimbursement data file to a private server when connected to the publicserver. The method also includes associating the cost reimbursement datafile to a ledger at the private server. The ledger corresponds to apolicy for using the printing device. The method also includes applyingthe policy to the cost reimbursement based on information from theledger. The policy is stored on the private server. The method alsoincludes determining a payment for printing the document according tothe policy.

A method for using a policy-based printing system is disclosed. Themethod includes generating a request to print a document at a printingdevice. The method also includes receiving the request at a publicserver. The method also includes determining that a private server toprocess the request is not available. The method also includes printingthe document at the printing device. The method also includesdetermining a cost for the printed document. The method also includesreceiving the cost using a mobile application on a mobile device. Themethod also includes generating a cost reimbursement data file accordingto the cost. The method also includes submitting the cost reimbursementdata file to the private server when connected to the public server. Themethod also includes associating the cost reimbursement data file to aledger at the private server. The ledger corresponds to a policy forusing the printing device. The method also includes applying the policyto the cost reimbursement data file based on information from theledger. The policy is stored on the private server. The method alsoincludes determining a payment for printing the document according tothe policy.

A method for a printing system is disclosed. The method includesdetermining a cost for the printed document. The method also includesgenerating a cost reimbursement data file according to the cost. Themethod also includes receiving the cost reimbursement data file at apublic server. The method also includes submitting the costreimbursement data file to a private server when connected to the publicserver. The method also includes associating the cost reimbursement datafile to a ledger at the private server. The ledger corresponds to apolicy for printing the printed document. The method also includesapplying the policy to the cost reimbursement based on information fromthe ledger. The method also includes determining a payment for printingthe document according to the policy.

BRIEF DESCRIPTION OF THE DRAWINGS

Various other features and attendant advantages of the present inventionwill be more fully appreciated when considered in conjunction with theaccompanying drawings.

FIG. 1 depicts a system to implement policy-based printing on a printingdevice according to the disclosed embodiments.

FIG. 2 illustrates a block diagram of components of the printing deviceused in conjunction with the authentication system according to thedisclosed embodiments.

FIG. 3 illustrates a flow diagram for implementing a policy-basedprinting system according to the disclosed embodiments.

FIG. 4A illustrates a domain list for use within the policy-basedprinting system according to the disclosed embodiments.

FIG. 4B illustrates a policy for use within the policy-based printingsystem according to the disclosed embodiments.

FIG. 5 illustrates a block diagram of servers and data used within thepolicy-based printing system according to the disclosed embodiments.

FIG. 6 illustrates a flowchart for printing at a printing device withinthe policy-based printing system according to the disclosed embodiments.

FIG. 7 illustrates a flowchart for implementing a policy-based printingsystem in a public domain according to the disclosed embodiments.

FIG. 8 illustrates a flowchart for implementing a policy-based printingsystem using tokens according to the disclosed embodiments.

FIG. 9 illustrates a flowchart for selecting a plurality of print jobsfrom a plurality of private domains for printing in a public domainaccording to the disclosed embodiments.

FIG. 10 illustrates a policy-based system to implement policy-basedprinting using a private server according to the disclosed embodiments.

FIG. 11 illustrates a printing system performing printing operationswhen the private server is not available according to the disclosedembodiments.

FIG. 12 illustrates a block diagram of a mobile device for use in thepolicy-based printing system according to the disclosed embodiments.

FIG. 13 illustrates a flowchart for printing a document when the privateserver is not available in a policy-based system according to thedisclosed embodiments.

FIG. 14 illustrates a flowchart for applying a policy to a costreimbursement request according to the disclosed embodiments.

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS

Reference will now be made in detail to specific embodiments of thepresent invention. Examples of these embodiments are illustrated in theaccompanying drawings. Numerous specific details are set forth in orderto provide a thorough understanding of the present invention. While theembodiments will be described in conjunction with the drawings, it willbe understood that the following description is not intended to limitthe present invention to any one embodiment. On the contrary, thefollowing description is intended to cover alternatives, modifications,and equivalents as may be included within the spirit and scope of theappended claims. Numerous specific details are set forth in order toprovide a thorough understanding of the present invention.

The disclosed embodiments use an authentication server, a policy server,a file server, a network enabled printing device, and a public domainserver. At the printing device, a user may provide authenticationinformation, such as a username or password. The authenticationinformation is transmitted from the device to a public domain serverthat processes the username for domain information. The domaininformation is matched to a domain on record and a private server isidentified that can handle the domain authentication. The public domainserver, through a direct connection to the private server, will gothrough a series of steps to obtain an authentication token, a policyapplicable to the user, a job list of the user, and the job binary datafor printing a print job on the printing device.

FIG. 1 depicts a system 100 to implement policy-based printing on aprinting device 104 according to the disclosed embodiments. System 100includes network 102 which exchanges data between the public and privatedomains within system 100. System 100 allows a user to retrieve a printjob having job binary data 140 from a private domain server to print onprinting device 104. Printing device 104 may be any device thatprocesses the binary data to generate an electronic document that isthen printed or accessed by the user. Printing device 104 also may beknown as an image forming apparatus or a multi-functional printer. Forexample, printing device 104 may print on a sheet of paper the documentgenerated from binary data 140. Alternatively, printing device 104 maydisplay the electronic document to the user. Printing device 104 alsomay store the binary data for the print job. Printing device includesengine 106, which performs many of the operations to print, scan, store,modify, and the like. Printing device 104 and engine 106 are disclosedin greater detail below with reference to FIG. 2.

System 100 include public domain 110 and private domains 120 and 130.Public domain 110 may represent a collection of public servers anddevices linked to network 102. In some embodiments, these servers arecloud servers. Public domain 110 also may be known as a public networkof the public servers. Public domain 110 is accessible by printingdevice 104. Additional printing devices may connect to public domain110, such shown by printing device 105. The printing devices may belocated in public places, such as convenience stores, libraries,printing and copying stores and kiosks, and the like. Users may accessthe printing devices and, in turn, the servers within public domain 110.The users may need to validate their ability to access public domain 110through a connected printing device.

Public domain 110 includes public policy server 112. Public policyserver 112 interacts with private domains 120 and 130 as well asprinting devices 104 and 105. Public policy server 112 may act as themiddle man between public domain 110 and the private domains. Publicpolicy server 112 may generate and store tokens used to implement thepolicy-based operations disclosed below. It also may store and allowaccess to a policy 142 received from a private domain, upon request.Policy 142, disclosed in greater detail below, outlines what a user canand cannot do when printing to printing device 104 from a privatedomain.

Public file server 114 is connected to public policy server 112. Publicfile server 114 may store or host binary data 140 for print job from aprivate domain. Printing device 104 may retrieve binary data 140securely for a print job. In some embodiments, printing device 104 doesso through public policy server 112. Public file server 114 also mayreceive binary data 140 from a server in a private domain, as disclosedbelow.

System 100 includes private domains 120 and 140. System 100 may includeadditional private domains, not shown here. Each private domain mayinclude a plurality of private servers that are protected by a firewallfrom access from network 102. For example, private domain 120 includesfirewall 122. Firewall 122 may be a software or hardware device thatfilters data and information coming over network 102 to private domain120 for malicious or unauthorized access. If an incoming packet of datais flagged by the filters in firewall 122, then it is not allowedthrough to private domain 120. Firewall 132 may serve the same functionfor private domain 130.

Private domain 120 includes private authentication server 124, privatejob server 126, and private policy server 128. Private domain 130includes private authentication server 134, private job server 126, andprivate policy server 128. The servers for private domain 120 aredisclosed below, but their functionality may apply to the servers inprivate domain 130.

Further, additional servers may be in a private domain and used securelyto exchange information over network 102.

Private authentication server 124 is a private domain server that willprovide authentication and authorize a user to prove his/her identify.Private authentication server 124 may be the main server that connectsthe private and public domain information exchange. In some embodiments,private authentication server 124 establishes a protocol connection 144with public policy server 112 to provide a domain list 146 for access toprivate domain 120. Private authentication server 124 also verifies auser trying to access private domain 120 using public policy server 112.

Private job server 126 is a private domain server that stores all thebinary data for the job files, or print jobs. When a user wants to printout a job file at printing device 104, private job server 126 should bequeried in order to retrieve binary data 140 to generate the print job.Private job server 126 may forward binary data 140 to public file server114 according to policy 142.

Private policy server 128 is a private domain server that hosts orstores all the policies, such as policy 142, related to a user. Whenprinting device 104 attempts to perform any function, it should requestprivate policy server 128 determine whether the user is allowed to doso. Private policy 128 may do the determination via public policy server112.

The disclosed embodiments allow access to private servers from a publicdomain or to print on printing device 104 within a public network. Anintranet application may do the authentication and job spooling so usersneed to authenticate printing device 104 before use. A policy may beassociated with where a user can print, what kind of paper, number ofpages, and the like. For example, some users may want to print from apublic location, such as a convenience store, and want to access aprivate server that stores the print jobs. They would need access fromnetwork 102.

In some embodiments, public policy server 112 is a cloud server. Publicpolicy server 112 may not be able to do accounting policy management todetermine whether a user is allowed to print at printing device 104.Private domains 120 and 130 can operate over the cloud. Public policyserver 112 may enforce the rules of the policy but management of thepolicy is still at a private server. Public policy server 112 also needsto distinguish between the private servers and private domains. Thus, ifa user is outside the private network for a private domain, publicpolicy server 112 will find the correct private domain to connect. Thatprivate domain will validate the user and access or use of the printjob.

FIG. 2 illustrates a block diagram of components of printing device 104used in conjunction with system 100 according to the disclosedembodiments. The architecture shown in FIG. 2 may apply to anymulti-functional printer or image forming apparatus that scans documentsto perform other functions, such as printing, storing, copying, and thelike. As disclosed above, printing device 104 may send and receive datafrom public domain 110 and private domains 120 and 130.

Printing device 104 includes a computing platform 201 that performsoperations to support these functions. Computing platform 201 includes acomputer processing unit (CPU) 202, an image forming unit 204, a memoryunit 206, and a network communication interface 210. Other componentsmay be included but are not shown for brevity. Printing device 104,using computing platform 201, may be configured to perform variousoperations, such as scanning, copying, printing, receiving or sending afacsimile, or document processing. As such, printing 104 may be aprinting device or a multi-function peripheral including a scanner, andone or more functions of a copier, a facsimile device, and a printer. Toprovide these functions, printing device 104 includes printer components220 to perform printing operations, copier components 222 to performcopying operations, scanner components 224 to perform scanningoperations, and facsimile components 226 to receive and send facsimiledocuments. CPU 202 may issue instructions to these components to performthe desired operations.

Printing device 104 also includes a finisher 211 and one or more papercassettes 212. Finisher 211 includes rotatable downstream rollers tomove papers with an image formed surface after the desired operation toa tray. Finisher 211 also may perform additional actions, such assorting the finished papers, binding sheets of papers with staples,doubling, creasing, punching holes, folding, and the like. Papercassettes 212 supply paper to image the various components 220, 222,224, and 226 to create the image formed surfaces on the papers. Papercassettes 212 may include papers having various sizes, colors,composition, and the like. Paper cassettes 212 may be removed to refillas needed.

Document processor input feeder tray 230 may be the physical componentsof printing device 104 to receive papers and documents to be processed.A document is placed on or in document processor input feeder tray 230,which moves the document to other components within printing device 104.The movement of the document from document processor input feeder tray230 may be controlled by the instructions input by the user. Forexample, the document may move to a scanner flatbed for scanningoperations. Thus, document processor input feeder tray 230 provides thedocument to scanner components 220. As shown in FIG. 2, documentprocessor input feeder tray 230 may interact with engine firmware 106 toperform the desired operations.

Memory unit 206 includes memory storage locations 214 to storeinstructions 215. Instructions 215 are executable on CPU 202 or otherprocessors associated with printing device 104, such as any processorswithin components 220, 222, 224, or 226. Memory unit 206 also may storeinformation for various programs and applications, as well as dataspecific to printing device 104. For example, a storage location 214 mayinclude data for running an operating system executed by computingplatform 201 to support the components within printing device 104.According to the disclosed embodiments, memory unit 206 may store thetokens and codes used in performing the authentication operations forprinting device 104.

Memory unit 206 may comprise volatile and non-volatile memory. Volatilememory may include random access memory (RAM). Examples of non-volatilememory may include read-only memory (ROM), flash memory, electricallyerasable programmable read-only memory (EEPROM), digital tape, a harddisk drive (HDD), or a solid-state drive (SSD). Memory unit 206 alsoincludes any combination of readable or writable volatile memories ornon-volatile memories, along with other possible memory devices.

Computing platform 201 may host one or more processors, such as CPU 202.These processors are capable of executing instructions 215 stored at oneor more storage locations 214. By executing these instructions, theprocessors cause printing device 104 to perform various operations. Theprocessors also may incorporate processing units for specific purposes,such as application-specific integrated circuits (ASICs) and fieldprogrammable gate arrays (FPGAs). Other processors may be included forexecuting operations particular to components 220, 222, 224, and 226. Inother words, the particular processors may cause printing device 104 toact as a printer, copier, scanner, and a facsimile device.

Printing device 104 also includes an operations panel 208, which may beconnected to computing platform 201. Operations panel 208 may include adisplay unit 216 and an input unit 217 for facilitating interaction witha user to provide commands to printing device 104. Display unit 216 maybe any electronic video display, such as a liquid crystal display (LCD).Input unit 217 may include any combination of devices that allow usersto input information into operations panel 208, such as buttons, a touchscreen, a keyboard or keypad, switches, dials, and the like. Preferably,input unit 217 includes a touch-screen digitizer overlaid onto displayunit 216 that senses touch to receive inputs from the user. By thismanner, the user interacts with display unit 216. Using thesecomponents, one may enter an identification code 138 generated by mobileapplication 110 into printing device 104.

Printing device 104 also includes network communication processing unit218. Network communication processing unit 218 may establish a networkcommunication, such as a wireless or wired connection with one or moreother image forming apparatuses and a server in an image forming system.CPU 202 may instruct network communication processing unit 218 totransmit or retrieve information over a network using networkcommunication interface 210. As data is received at computing platform201 over a network, network communication processing unit 218 decodesthe incoming packets and delivers them to CPU 202. CPU 202 may actaccordingly by causing operations to occur on printing device 104. CPU202 also may retrieve information stored in memory unit 206, such assettings for printing device 104.

Printing device 104 also includes engine 106. Engine 106 may be acombination of hardware, firmware, or software components that actaccordingly to accomplish a task. For example, engine 106 is comprisedof the components and software to print a document. It may receiveinstructions from computing platform 201 after user input via operationspanel 208. Alternatively, engine 106 may receive instructions from otherattached or linked devices.

Engine 106 manages and operates the low-level mechanism of the printingdevice engine, such as hardware components that actuate placement oftoner onto paper. Engine 106 may manage and coordinate the half-toner,toner cartridges, rollers, schedulers, storage, input/output operations,and the like. Raster image processor (RIP) firmware 290 that interpretsthe page description languages (PDLs) would transmit and sendinstructions down to the lower-level engine 106 for actual rendering ofan image and application of the toner onto paper during operations onprinting device 104.

FIG. 3 depicts a flow diagram 300 for implementing policy-based printingsystem 100 according to the disclosed embodiments. In disclosing theembodiments shown by flow diagram 300, reference may be made to elementsshown in FIGS. 1-2 and 4A, 4B, and 5. Flow diagram 300 shows theoperations between the various servers disclosed in FIG. 1 above. Flowdiagram 300 also depicts the actions taken at the various servers. Theprivate and public servers may perform additional operations and actionsnot shown herein. The operations may be executed over network 102.Further, flow diagram 300 shows the operations between public domain 110and private domain 120. Thus, firewall 122 may exist between the publicservers and the private servers. The same operations may be executedbetween public domain 110 and private domain 130.

The processes disclosed by flow diagram 300 seek to solve the problem ofhow to authenticate a user in one location, such as a convenience storewith printing services, that he/she is within an organization that has apolicy applicable to the user. Further, the policy is stored in aprivate domain not readily accessible from the printing device at theconvenience store. The printing device is connected to a public networkand may be part of a public domain, such as public domain 110. Thedisclosed embodiments enable the user and the organization to implementthe policy, which is applicable to the private domain, within the publicdomain of the printing device located in the convenience store.

Operation 302 executes by private authentication server 124 sending aninitialization request to public policy server 112. As disclosed above,private authentication server 124 is within private domain 120 andpublic policy server 112 is within public domain 110. To send theinitialization request, an administrator enter information about publicpolicy server 112. Such information may include server network address,location, server capabilities, and the like. Once the information isentered, private authentication server 124 generates a verificationtoken 502 which verifies that public policy server 112 is acceptable toreceive information and communicate with the private authenticationserver.

Operation 304 executes by returning acceptance of the initializationrequest and establishing a protocol connection 144 between privateauthentication server 124 and public policy server 112. Protocolconnection 144 may stay established as long as public policy server hasverification token 502. Verification token 502 may be stored on publicpolicy server 112 and presented whenever verification is required byprivate authentication server 124. Protocol connection 144 provides apersistent connection between private authentication server 124 andpublic policy server 112 that allows the servers to send data at anytime. Protocol connection 144 preferably may be known as a WebSocketconnection, which provides a full-duplex communication channel over asingle connection. Preferably, protocol connection 144 uses a secureprotocol.

Operation 306 executes by providing a domain list 400 from privateauthentication server 124 to public policy server 112. This operationalso may include providing the information about the privateauthentication server. Action 308 executes by setting domain list 400 atpublic policy server 112 to include domain information for privateauthentication server 124. Public policy server 112 may refer to domainlist 400 whenever a user attempts to print from a private domain. Publicpolicy server 112 may use information provided by the user to determinewhich domain to obtain policy 142. For example, public policy server 112may be connected to more than one private domain. Domain list 400determines which private domain applies to a user trying to print.

FIG. 4A depicts an example domain list according to the disclosedembodiments. Domain list 400 may be a file having fields for the privatedomains and the email domains associated with each domain. A user isidentified as part of a domain using his/her email address. Publicpolicy server 112 will compare the email provided by the user todetermine which private domain to access. As shown in FIG. 4A, privatedomain 120 may be associated with two email domains 402 and 404. A userhaving an email domain with “@example1.com” or “@example2.com” will haveits policy and associated documents located on private domain 120. Auser having an email domain 406 with “@company.com” will have its policyand associated documents located on private domain 130. Additionalprivate domains may be served by public policy server 112. Privatedomain N will receive requests for policies of users having email domain408 of “@firm.com” and private domain N+1 will receive requests forpolicies of users having email domain 410 of “@college.com.”

As can be seen, companies, firms, and colleges have an interest inkeeping their network domains private. Further, these entities may wishto limit use of printing devices within public domains according to apolicy. Domain list 400 also may include an entry for a public domain,such as public domain X. In some instances, a public domain also mayinclude policies to limit capabilities of a user on a printing device104. These policies, however, may not be within a private domain andavailable for retrieving through a public network connection. An emaildomain of “@website.com” may direct public policy server 112 to a publicdomain for the associated policy 142. Referring back to FIG. 3,operation 310 returns an acknowledgement to private authenticationserver 124 that domain list 400 has been set and protocol connection 144exists with public policy server 112.

Operation 312 executes when a user wants to print a document at printingdevice 104 coupled to public policy server 112. Authenticationinformation 504 is provided from public policy server 112 to privateauthentication server 124. In some embodiments, the user enters ausername and password that is captured by public policy server 112. Forexample, the user may enter this information at printing device 104which forwards it to public policy server 112. Alternatively, the usermay connect to public policy server 112 through an application on amobile device or the like to provide authentication information 504.

In other embodiments, the user may enter a code, such as a personalidentification number (PIN), that retrieves this information to provideit to public policy server 112. Public policy server 112 receives thecode and matches the user information when the code is provided. Otherembodiments may use a graphical code or identification card having anumber that provides this information. Operation 312 sends thisauthentication information 504, such as username, password and PIN, toprivate authentication server 124.

Action 314 executes by authenticating the user with authenticationinformation 504. Thus, user information is not stored on public policyserver 112. Authentication still occurs in private domain 120 behindfirewall 122. If the user is authenticated, then action 314 alsoincludes private authentication server 124 generating authenticationtoken 506. Operation 316 executes by indicating that the user has beenvalidated and providing authentication token 506 to public policy server112. Public policy server 112 may assign authentication token 506 to theuser. Using the PIN example, the entered PIN may be associated withauthentication token 506.

Private authentication server 124 also may provide an email address orthe email domain, such as email domains 402-412 shown in FIG. 4A, topublic policy server 112 if this information is not already available.For example, it may be too cumbersome to enter email addresses atprinting device 104. Further, the administrators of private domain 120may not want valid email addresses being entered at printing device 104on a public network or in a public place. Thus, no email address isprovided to public policy server 112 from within public domain 110 but,instead, from private domain 120. Moreover, private authenticationserver 124 may provide only the domain and not the actual email address.

Once validated, public policy server 112 now retrieves a policy 142 fromprivate policy server 128. Operation 318 executes by getting policy 142.The email domain is compared against domain list 400 to determine whichprivate domain to query for the policy. In this example,user@example1.com is the email provided to public policy server 112. Itcompares the email to domain list 400 to determine the applicable policyis within private domain 120. Public policy server 112 sends determineddomain 508, such as example1.com, along with authentication token 506 toprivate policy server 128 in operation 318. If the next user has anemail domain of @company.com, then public policy server 112 determinesthat domain 508 is company.com and that the applicable policy is locatedin private domain 130.

Action 320 executes by identifying policy 142 as being applicable to theuser based on domain 508. Authentication token 506 may be associatedwith the user and this information provided from private authenticationserver 124. Policy 142 may be a file having flags or other informationto indicate what the user can do within a public network. For example,limitations may be set as to what type of printing can be done, thenumber of pages may be printed, and the like. FIG. 4B depicts a blockdiagram of an example policy for policy 142 according to the disclosedembodiments.

Policy 142 may include policy information 448. Policy information 448may include a title of the policy, document information, and privatedomain information. Policy 142 includes data, such as flags, thatindicates what can and cannot be performed in public domain 110. Thisdata may be known as parameters in policy 142. Examples of parametersthat limit printing operations are shown in FIG. 4B. Print parameter 449may be set to indicate whether a user can even print outside privatedomain 120. Certain users may not be allowed to print in a publicdomain. Print parameter 449 may be set to limit these users to scanningdocuments only or other operations that do not allow access to anydocuments or information stored in private domain 120.

Color parameter 450 may indicate whether the user can do color printingin public domain 110. If no, then the user may be limited to only blackand write printing. The user may be allowed to do color printing atprinting devices in private domain 120 but not allowed to do so in apublic domain setting.

Pages parameter 452 may set a limit on the number of pages that a usercan print. The administrators of private domain 120 do not wantunlimited printing to occur outside the private domain. Pages parameter452 may limit the number of pages printed per day, week, month, hour,year, and the like. Alternatively, pages parameter 452 may cap thenumber of pages printed to have the user check with the administratorsof public domain 120 to reset this parameter. Once the user hits alimit, he/she requests that the number of pages printed be reset toallow further operations. Costs parameter 454 may be similar to pagesparameter 452 except to limit the amount of fees that the user may incurbefore printing is stopped. Costs parameter 454 helps prevent the userfrom running up large bills at a convenience store. It also may cap theamount of costs incurred on a periodic basis or as a total cost.

Security level parameter 456 may indicate that the user can only accessdocuments from a job list provided from private job server 126 having acertain security or access level. Security level parameter 456 may helpprevent accidental or intentional printing of sensitive documents atprinting device 104. Further, the user may have access to sensitivedocuments when printing within private domain 120 but not so whenprinting using public domain 110. Policy 142 may limit exposure to suchdocuments.

Location parameter 458 may indicate whether the user can print atcertain locations. Policy 142 may place geographic or other limitationson where the user can print using a public domain. Location parameter458 also may indicate the type of locations to allow printingoperations. For example, the administrators of private domain 120 maynot allow printing in a convenience store but may allow printing in alibrary. Device parameter 460 may act similar to location parameter 458except limit printing on certain devices. For example, policy 142 maynot allow printing on a printing device 104 that does not have legalsized paper capability or stores the data from the job file in a memoryon the device. Device parameter 460 also may limit printing operationsto known printing devices having a serial number or IP address.

Operation 322 executes by providing policy 142 to public policy server112. Public policy server 112 may configure policy 142 to determinewhether the user can print using public domain 110 and what limits onthe printing operations may be enforced. Policy 142 may apply to allusers of private domain 120. Alternatively, policy 142 may treat usersdifferently. Some users may have unlimited printing privileges accordingto parameters 452 or 454 while others are prevented from exceeding a capset forth by these parameters. Public policy server 112 configures thedeterminations using policy 142 accordingly.

Using the parameters within policy 142, operation 324 executes bygetting a job list from private job server 126. Public policy server 112may generate a job token 510. Job token 510 is presented to private jobserver 126 to obtain a job list 511 of print jobs available to the user.In some embodiments, job token 510 may include data that specifies whatprint jobs can be added to job list 511 based on the parameters setforth in policy 146. Job list 511 includes those print jobs that meetthe specifications of policy 146. For example, color print jobs will notbe included in job list 511 of policy 146 does not allow color printingfor the user in a public domain. Action 326 executes by generating joblist 511 in response to job token 510. Operation 322 executes by sendingthe print jobs in job list 511 to public policy server 112 from privatejob server 126.

The user then may select a print job from job list 511. The user mayselect from an interface provided on printing device 104 that is thencommunicated to public policy server 112. Alternatively, an applicationmay execute on a device of the user that presents the job list andallows for selection from the list. The selection is sent to publicpolicy server 112. Operation 330 executes by sending a command toprivate job server 126 to prepare a selected print job along with auniform resource locator (URL) address from public policy server 112.The URL address is one associate with public policy server 112 andaccessible from public domain 110.

Action 332 executes by retrieving and preparing the data for the printjob. Preferably, the data is binary data that represents the documentfor the print job. This may be shown as binary data 140 in FIGS. 1 and5. Action 332 also may convert the data into a format compatible withprinting device 104. For example, the document may include data thatcalls for printing on a legal sized paper while printing device 104 onlyprints using letter sized paper. The data sent from private job server126 may be modified to fit onto a letter sized paper.

Operation 334 executes by uploading binary data 140 to the URL addressprovided in operation 330. Thus, private job server 126 puts the datafor the print job outside private domain 120 for the first time at thispoint. The URL address may be valid for only a specified period of time,such as two hours, one day, a week, and the like. After that point, theURL address may expire. The URL address to download binary data 140 forthe print job is provided to public file server 114.

Public policy server 112 now retrieves binary data 140 and sends thedata to printing device 104. Before that occurs, however, the disclosedembodiments may confirm whether the user has enough funds to pay forprocessing and completing the print job. Operation 336 executes bygenerating a confirmation token 514 at public policy server 112 once itis confirmed that the user or user's account has enough money to coverexpenses to print. Public policy server 112 may compare the fundsavailable to the cost to complete the print job. If there are enoughfunds, then confirmation token 514 is generated and sent to public fileserver 114. If not, then the user may be alerted to add more funds tohis/her account.

Action 338 executes by obtaining uploaded binary data 140 from the URLaddress. Public file server 114 may send a call to the URL address whichthen sends binary data 140 to the public file server. Public file server114 may store binary data 140 until confirmation token 514 is received.If a confirmation token 514 is not received within a specified timeframe, then binary data 140 may be deleted from public file server 114.This feature prevents print jobs from private domain 120 from beingstored indefinitely in public domain 110. Other factors may be used todetermine when to delete any stored files of binary data.

Operation 340 executes by sending binary data 140 for the print job frompublic file server 114 to public policy server 112. Operation 342executes by sending binary data 140 from public policy server 112 toprinting device 104. Printing device 104 may process the print jobaccordingly. The user's account for printing on public domain 110 may becharged accordingly as well. In some embodiments, public file server 114may send binary data 140 to printing device 104.

The disclosed embodiments allow a private domain, or network, to printto a public domain using a policy applicable to the public domain.Internal policies to the private domain are not material to printing inthe public domain. Further, job data is kept private as long aspossible. The data for the print job is provided to the public domainwhen requested by the user and approved according to the policy. Thisfeature allows the user to print anywhere. The print job is notautomatically sent outside the private domain or from the privateservers until printing actually occurs. The disclosed embodimentsprovide greater flexibility for companies and users to access documentsin a secure, private location and use devices and resources in a publicsetting.

FIG. 6 illustrates a flowchart 600 for printing at printing device 104within policy-based printing system 100 according to the disclosedembodiments. Flowchart 600 may refer back to elements disclosed in FIGS.1-5 for illustrative purposes. The embodiments disclosed by flowchart600, however, are not limited to the features disclosed in FIGS. 1-5.Further, flowchart 600 may compliment the embodiments disclosed by flowdiagram 300.

Step 602 executes by establishing a protocol connection 144 betweenprivate authentication server 124 and public policy server 112. Theprotocol connection allows communication between the servers, one inprivate domain 120 and another one in public domain 110. Step 604executes by providing a domain list 146 from private authenticationserver 124 to public policy server 112. Domain list 146 may includeapplicable private domains and associated email domains that areaccessible by public policy server 112. Step 606 executes by enteringuser data 504 within public network 110 and providing the data to publicpolicy server 112. Step 608 executes by sending user data 504 to privateauthentication server 124.

Step 610 executes by validating the user at private authenticationserver 124. Private authentication server 124 checks the provided userdata 504 against its stored authentication records for the user. If theuser is validated, then step 612 executes by generating authenticationtoken 506. Step 614 executes by receiving authentication token 506 atpublic policy server 112. Step 616 executes by determining theapplicable private domain for the user according to domain list 146.Preferably, public policy server 112 uses the email address for the userto determine which private domain to access for the policy for the user.

Step 618 executes by retrieving policy 142 from private policy server128 based on the receipt of authentication token 506 and domain 508 frompublic policy server 112. Private policy server 128 is identifiedaccording to the applicable domain 508 and queried by public policyserver 112. Once verified, private policy server 128 sends policy 142 topublic policy server 112.

Step 620 executes by determining the parameters for policy 142. Thisprocess is disclosed above. As shown in FIG. 4B, policy 142 may includeparameters that outline what printing options are available to the user.Step 622 executes by applying the parameters to configure public policyserver 112 to determine what print jobs or operations are available tothe user in public domain 110.

Step 624 executes by determining whether the user is allowed to accessprinting device 104 using public domain 110 according to the policy.Further, step 624 determines what print jobs are available to the useraccording to policy 142. The determination also may include reviewingpolicy 142 for allowing other operations on printing device 104 such asscanning, editing, faxing, and the like. If no, then step 626 executesby sending a message to the user or public policy server 112 that theoperation on printing device 104 is not allowed.

If step 624 is yes, then step 628 executes by retrieving the print jobfrom private job server 126. A job list 511 may be provided. The printjob is selected from job list 511. Job token 510 is generated by publicpolicy server 112. Public policy server 112 sends job token 510 toprivate job server 126 to obtain job list 511. Upon selection of theprint job, private job server 126 uploads binary data 140 for the printjob to a location accessible by public file server 114. Step 630executes by confirming access to binary data 140 for the print job bychecking to see if the user has enough money to pay for using printingdevice 104. Other restrictions also may be checked, such as time of day,location, and the like, to confirm whether the print job should bereleased to printing device 104.

Step 632 executes by sending binary data 140 to printing device 104 uponconfirmation in step 630. Public policy server 112 generates aconfirmation token 514 to confirm that the user is allowed to print.Public policy server 112 may send confirmation token 514 to public fileserver 114. Upon receipt of the confirmation token, public file server114 may forward binary data 140 for the print job to public policyserver 112, which provides the data file to printing device 104.

FIG. 7 illustrates a flowchart 700 for implementing a policy-basedprinting system 100 in a public domain 110 according to the disclosedembodiments. Flowchart 700 may refer back to elements disclosed in FIGS.1-5 for illustrative purposes. The embodiments disclosed by flowchart700, however, are not limited to the features disclosed in FIGS. 1-5.Further, flowchart 700 may compliment the embodiments disclosed by flowdiagram 300.

As disclosed above, public policy server 112 may interact with aplurality of private domains. Public policy server 112 may retrieve andimplement more than one policy for printing or processing print jobs inpublic domain 110. In some embodiments, public policy server 112 mayimplement policies for a plurality of public domains as well. Further, aplurality of printing devices may be connected to public policy server112. Flowchart 700 discloses some embodiments that have public policyserver 112 interacting with more than one private domain.

Step 702 executes by validating users within public domain 110 atprivate authentication server 124. As disclosed above, a protocolconnection may be established between public policy server 112 andprivate authentication server 124 to exchange user information toperform the validation.

Step 704 executes by determining a private policy server for each useraccording to a domain for the user at public policy server 112. Thedomains for each user are private domains. Preferably, the email domainfor each user indicates the applicable private domain for that user.With two or more users, different email domains may indicate more thanone private domain. Step 706 executes by retrieving a policy 142 foreach user according to the respective domain from private policy server128.

Step 708 executes by determining the parameters for each policy 142. Allof the policies are received at public policy server 112. Public policyserver 112 configures the treatment of printing requests for eachprivate domain according to the corresponding policy. The policy setsforth the parameters for printing from the private domain via the publicdomain. For example, the parameters for one policy may only allow 100pages to be printed per user a month from private domain 120 while theparameters for another policy may only allow 20 pages to be printed peruser from private domain 130. Public policy server 112 is configuredaccordingly.

Step 710 executes by determining whether the user is allowed to printaccording to the applicable policy. If no, then step 712 executes bysending an alert to public policy server 112 or to the user. No printingoperations using public domain 110 are allowed. If yes, then step 714executes by receiving a job list according to the applicable policy fromprivate job server 126. Step 716 executes by making the print jobs inthe job list available to the user. Step 718 executes by selecting aprint job from the job list. Binary data 140 for the selected print jobis retrieved from private job server 126 and made available to publicfile server 114.

Step 720 executes by confirming whether the print job may be sent toprinting device 104. Public policy server 112 confirms that the user hasenough funds or credits to perform the request task on printing device104. If yes, then step 722 executes by sending the print job as binarydata 140 to printing device 104. If no, then step 724 executes bydenying the print job. The user may be prompted to provide additionalfunds or credits to perform the requested task.

FIG. 8 depicts a flowchart 800 for implementing a policy-based printingsystem 100 using tokens according to the disclosed embodiments.Flowchart 800 may refer back to elements disclosed in FIGS. 1-5 forillustrative purposes. The embodiments disclosed by flowchart 800,however, are not limited to the features disclosed in FIGS. 1-5.Further, flowchart 800 may compliment the embodiments disclosed by flowdiagram 300.

Step 802 executes by generating authentication token 506 at privateauthentication server 124. This step occurs once private authenticationserver 124 validates a user attempting to print using public domain 110.Public policy server 112 sends user information 504 including an emailaddress, username, password, or PIN to private authentication server124. Private authentication server 124, being in private domain 120, maysecurely store this information for the user. The secure userinformation is not made available in public domain 110. Authenticationtoken 506 indicates that the user may access private domain 120. Step804 executes by sending authentication token 506 to public policy server112.

Step 806 executes by sending authentication token 506 and domain 508 toprivate policy server 128. Public policy server 112 sends authenticationtoken 506 and domain 508 after the domain is determined using domainlist 146. An email address may indicate an email domain that is used asdomain 508. Domain 508 indicates which private domain to access for theapplicable policy. For example, referring to FIG. 4A, an email ofuser@example1.com will indicate private domain 120. Public policy server112 attaches authentication token 506 to domain 508 and sends therequest for the policy for the user.

Step 808 executes by retrieving policy 142 from private policy server128. Authentication token 506 confirms that the user corresponds to thepolicy. Authentication token 506 may include data provided by privateauthentication server 124 that identifies the user as able to useprivate domain 120 and, therefore, policy 142 for the private domainshould be used in printing on public domain 110. Private policy server128 sends policy 142 to public policy server 112. Public policy server112 then configures itself to apply the parameters of the policy tousing public domain for the user.

Step 810 executes by generating job token 510 at public policy server112 after applying the parameters of policy 142. The parameters maydetail what the user can do using public domain 110. These parametersmay not necessarily correspond to what the user can do using privatedomain 120. Limitations are placed on the user on how he/she can useprinting device 104. Job token 510 may reflect the parameters to compilethe job list of print jobs available to the user according to policy142.

Step 812 executes by sending job token 510 to private job server 126.Private job server 126 may store the print jobs available to the user orto users in private domain 120. In some embodiments, a plurality ofprint jobs may be available such that a job list 511 is generated basedon the parameters for the user in using public domain 110. Job token 510may be used in generating job list 511 in that it includes informationto select the appropriate print jobs to include in the print job list.

Step 814 executes by providing print job list 511 to public policyserver 112. The user may select a print job from print job list 511.Alternatively, the desired print job may already be selected such thatpublic policy server 112 receives data for the selection, such as froman application on a mobile device, that corresponds to the print job injob list 511. Public policy server 112 then requests the print job datafrom private job server 126. Step 816 executes by sending job binarydata 140 for the selected print job from private job server 126 topublic file server 114.

Step 818 executes by confirming whether the user may print or processthe print job at printing device 104. For example, public policy server112 may confirm that the user has enough funds in an account to pay forprinting on printing device 104. If step 818 is no, then step 820executes by sending an alert to the user or to public policy server 112that printing operations are to be stopped until the condition is met.Using the above example, the user may be asked to provide additionalfunds to his/her account to print the document.

If step 818 is yes, then step 822 executes by generating confirmationtoken 514 by public policy server 112. Confirmation token 514 indicatesthat the processing of binary data 140 at printing device 104 mayproceed. Step 824 executes by sending confirmation token 514 to publicfile server 114 to obtain binary data 140, which is stored thereon.Public file server 114 may send binary data 140 to public policy server112 upon receipt of confirmation token 514.

Step 826 executes by providing binary data 140 to printing device 104.Public policy server 112 may send binary data 140 once a connection isestablished with printing device 104. Public policy server 112 may haveto wait until printing device 104 is available before forwarding binarydata 140. Thus, the data from private job server 126 is not madeavailable on printing device 104 until the operations are ready tocommence. Although the current embodiments discuss printing on printingdevice 104, other operations also may occur, such as scanning, editing,faxing, and the like.

FIG. 9 depicts a flowchart 900 for selecting a plurality of print jobsfrom a plurality of private domains 120 and 130 for printing in publicdomain 110 according to the disclosed embodiments. Flowchart 900 mayrefer back to elements disclosed in FIGS. 1-5 for illustrative purposes.The embodiments disclosed by flowchart 900, however, are not limited tothe features disclosed in FIGS. 1-5. Further, flowchart 900 maycompliment the embodiments disclosed by flow diagram 300.

As disclosed above, different policies apply to different to users andprints jobs from different private domains. One private domain may notallow color printing while another private domain may not allowunlimited printing. Thus, public policy server 112 configures itself toresolve the different requirements set forth in a plurality of policiesfrom various private policy servers. Further, public policy server 112may manage different job lists and print jobs from the plurality ofprivate domains. Alternatively, a private domain may have differentdomains related to it, such as example1.com and example2.com for privatedomain 120 shown in FIG. 4A. Different policies may come from a singleprivate policy server.

Step 902 executes by generating verification token 502 at privateauthentication server 124. Private authentication server 124 receivesinformation about public policy server 112 in order to establish aprotocol connection. Verification token 502 helps to establish aconnection between private authentication server 124 and public policyserver 112. Private authentication server 134 also may generate averification token 502 to establish protocol connection to public policyserver 112.

Step 904 executes by sending verification token 502 to public policyserver 112. Step 906 executes by storing verification token 502 atpublic policy server 112. As long as public policy server 112 canpresent verification token 502 when requested or when submitting a printrequest for a user, the connection is established with privateauthentication server 124. Step 908 executes by providing domain list146 from private authentication server 124 to public policy server 112.Domain list 146 may include information pertaining to a plurality ofdomains for a plurality of private domains, as disclosed by FIG. 4A.

Step 910 executes by generating a first authentication token 506. Step912 executes by generating a second authentication token 506. The firstauthentication token may be generated in response to a first userproviding user information at public policy server 112. The secondauthentication token may be generated in response to a second userproviding user information at public policy server 112. Public policyserver 112 may access the appropriate private authentication server tovalidate the user information for each user. In some embodiments,private authentication server 124 may validate both users and generateboth authentication tokens. Alternatively, private authentication server124 may generate the first authentication token while privateauthentication server 134 may generate the second authentication token.Public policy server 112 may have instructions when to use the differentprivate authentication servers.

Step 914 executes by sending the first authentication token and a firstdomain to a first private policy server. Step 916 executes by sendingthe second authentication token and a second domain to a second policyserver. Public policy server 112 determines which private domain isapplicable to each user. The determination of the private domain may bebased on the email address for each user. In some embodiments, publicpolicy server 112 may send this data to a single private policy server,which stores different policies for different domains that use a singleprivate domain. Alternatively, the authentication tokens and domains maybe sent to separate private policy servers. For example, the firstauthentication token and first domain are sent to a first private policyserver, such as private policy server 128. The second authenticationtoken and the second domain are sent to a second private policy server,such as private policy server 138.

Flowchart 900 proceeds to steps A1 and A2 for steps 914 and 916,respectively. Steps A1 and A2 then proceed to steps 918 and 920,respectively. Step 918 executes by retrieving a first policy, such aspolicy 142, in response to the first authentication token and the firstdomain. Step 920 executes by retrieving a second policy, such as policy142, in response to the second authentication token and the seconddomain. In some embodiments, the first policy is stored on privatepolicy server 128 and the second policy is stored on private policyserver 138. Alternatively, both policies may be stored on private policyserver 128 or 138. The first policy may apply to the first user and thesecond policy may apply to the second user.

Step 922 executes by receiving the first and second policies at publicpolicy server 112. Step 924 executes by determining access to a firstprint job according to the first policy and access to a second print jobaccording to the second policy. Public policy server 112 may configurethe parameters of each policy to determine what type of print jobs maybe made available to each user. For example, the first print job may notbe available to the second user according to the second policy. Thedetermination of access may relate to what print jobs are available tothe users over public domain 110.

Step 926 executes by generating first and second job tokens, such as jobtoken 510, based on the first and second policies at public policyserver 112. A first job token is generated for the first policy and asecond job token for the second policy. In some embodiments, the firstjob token may be sent to private job server 126 and the second job tokenmay be sent to private job server 136. The different private job serversare in separate private domains. Alternatively, the job tokens may besent to private job server 126 or 136.

Step 928 executes by retrieving a first job list, such as job list 511,based on the first policy and the received first job token andretrieving the second job list, such as job list 511, based on thesecond policy and the received second job token. The applicable privatejob server or servers provide the job lists to public policy server 112.The first user may select a first print job from the first print joblist. The second user may select a second print job from the secondprint job list. These requests are communicated back to the applicationprivate job server or servers. The binary data for the first and secondprint jobs are sent to public file server 114.

Step 930 executes by generating confirmation tokens, such asconfirmation token 514, at public policy server 112 to indicate that theprint jobs may be processed at printing device 104. Public policy server112 may confirm that each user has enough funds in his/her account toperform operations on printing device 104, as disclosed above. A firstconfirmation token for the first print job is presented to public fileserver 114. A second confirmation token for the second print job ispresented to public file server 114. Public file server 114 provides thebinary data for each print job to public policy server 112. Step 932executes by sending the binary data for the first and second print jobsto printing device 104.

In some embodiments, it may be desired to not provide the policy to thepublic domain, either in a public domain server or the printing device.The policy could include details that are sent to many components withinthe system. Some servers and devices may not be able to implement thepolicy effectively. A policy may be a complex concept.

Whenever policy data arrive at the device, the data may need to beparsed correctly and applied correctly when a print job is sent to thedevice. These operations may impose a heavy burden on the developmentand maintenance of the device. Preferably, the printing system wouldlike the printing device, for example, to focus on what it does, such asprinting, scanning, or copying.

FIG. 10 illustrates a policy-based system 1000 to implement policy-basedprinting using a private server 1002 according to the disclosedembodiments. System 1000 may reduce development and maintenanceresponsibilities in multiple components in the system and provideadditional security with an updated policy. In some embodiments, aprivate server at the corporate office, or private domain, has thepolicy set by an administrator. The policy changes frequently andbecomes more complex with each evolution of software within the printingsystem or on the devices.

On the private server, a ledger may exist that records all the actionsperformed by all end user who are printing, copying, scanning, and thelike within system 1000. The users may utilize printing devices andservers in a public domain such that they perform actions outside thenormal corporate environment. A public server may serve as a gateway tothe private domain. It may have open websocket bi-directionalcommunication with the private server, as disclosed above. The printingdevice is connected to the public network and also is connected to thepublic server to whether it can do a simple action on behalf of the userin processing a document.

FIG. 10 shows a policy-based system 1000 having a private server 1002, apublic server 1004, a printing device 1006, and a mobile device 1008.These components of the system may be disclosed above with regard toFIGS. 1-9. In system 1000, private server 1002 may refer to any of theservers in the private domain, such as private authentication server124, private job server 126, and private policy server 128 of privatedomain 120 shown in FIG. 1. Private server 1002 may be used in system1000 to mean any server or group of servers in a private domain, asdisclosed above. Private server 1002 may be separated from servers andprinting devices in public domains by firewall 1011. Private server 1002also stores and applies policy 1010. Policy 1010 may correspond topolicy 142 disclosed above.

Public server 1004 may refer to any of the servers in the public domain,such as public file server 114 and public policy server 112 of publicdomain 110 shown in FIG. 1. Public server 1004 may be accessible by aplurality of printing devices, including printing device 1006. In thepublic domain, public server 1004 may manage print jobs going to variousprinting devices. It also may include a connection to private server1002, which has been verified and authenticated according the processesdisclosed above. For example, a websocket connection 1005 may existbetween private server 1002 and public server 1004.

Printing device 1006 may receive documents from public server 1004 aswell as other sources to print, copy, store, modify, and the like. Thefeatures of printing devices according to the disclosed embodiments aredisclosed above. Printing device 1006 may include device identification1018 that indicates a unique identifier within system 1000. In someembodiments, device identification 1018 may be a number, alphanumericcharacters, or a combination thereof. Public server 1004 may senddocuments and files to printing device 1006 based on deviceidentification 1018.

Mobile device 1008 may be a mobile device, tablet, and the like. Mobiledevice 1008 may move between the private domain and the public domain,as separated by firewall 1011. It also may access private server 1002 aswell as public server 1004. A user may send and receive data from theservers at mobile device 1008. Mobile device 1008 also may sendinstructions 1014 to printing device 1006 to print, copy, scan, and thelike stored documents from private server 1002. Mobile device 1008 isdisclosed in greater detail in FIG. 13.

Private server 1002 may upload document 1012. Document 1012 may besimilar to the print jobs disclosed above. Document 1012 includes dataand information that is transmitted to devices within the privatedomain. The user of mobile device 1008 may upload document 1012 withinthe private domain. Document 1012, however, may be processed and printedat devices outside the public domain and not necessarily at devicesconnected to private server 1002. Policy 1010 also may be used todetermine how and if document 1012 is used within system 1000 outsidethe private domain.

The user may authenticate mobile device 1008 to public server 1004according to the disclosed embodiments. For example, mobile device 1008may provide verification data, such as a user/account name and password,to verify the user to public server 1004. This process may be disclosedabove with regard to verification between public policy server 112 andprivate authentication server 124. Alternatively, the verification datamay be a token used by user device to authenticate the user in a publicdomain. Upon authentication, websocket connection 1005 may beestablished to allow open bi-directional communication between privateserver 1002 and public server 1004.

In some embodiments, printing device 1006 receives instructions 1014from mobile device 1008 to process document 1012. An electronic copy ofdocument 1012 may be sent to printing device 1006 to process and print,copy, scan, and the like. The user also may modify the electronic copy.In summary, a document stored on private server 1002 is made availableon a public printing device.

Before receiving document 1012, printing device 1006 in conjunction withpublic server 1004 and private server 1002 may determine whether anyaction on behalf of the user is allowed at the printing device. Anaction by printing device 1006 is a simple operation of print, copy,scan, and the like. It may be measured in the smallest scale possible,such as a single page at a time. Thus, printing device 1006 may sendrequest 1016 to public server 1004, which is then forwarded to privateserver 1002. Request 1016 may be generated at mobile device 1008 orprinting device 1006. Printing device 1006 merely has to determinewhether it can perform an operation or not. Printing device 1006 doesnot do any analysis of policy 1010.

Public server 1004 receives request 1016 pertaining to the userinstructions to printing device 1006 to process document 1012. Publicserver 1004 may forward request 1016 without further processing. Uponreceipt of responses from private server 1002, public server 1004 mayforward document 1012 or provide further instructions to printing device1006. Public server 1004 also may check to determine if private server1002 is available to receive request 1016. If not, then public server1004 may store request 1016 and resubmit it when connection 1005 isavailable. Other operations also may occur, as disclosed below.

Private server 1002 receives request 1016 from public server 1004 viawebsocket connection 1005. If no websocket connection exists, thenprivate server 1002 may not receive the request and public server 1004responds to printing device 1006 with an alert that printing, copying,scanning, and the like for request 1016 is denied. In some embodiments,public server 1004 may allow printing device to proceed with printingdocument 1012. Upon receipt of request 1016, private server 1002analyzes policy 1010 to determine whether the action is allowed for theuser on printing device 1006. Private server 1002 also compiles oraccesses ledger 1003 to determine if the action is allowed. Ledger 1003may be a record or file of all fine grained action within system 1000that provides the status of the account for the user. For example,ledger 1003 may indicate how many pages that the user has printed in thepolicy-set period, costs incurred, and other statistics of actionslimited by policy 1010.

Update 1020 also may be received at private server 1002 that impactspolicy 1010 and ledger 1003. Update 1020 may change the parameters ofinterest to policy 1010 or provide temporary adjustments to the policy.For example, the user may exceed his/her printing page limit by aspecified number of pages for a 24 hour period. The user is attending animportant off-site meeting or conference that would provide a goodreason to exceed the daily printing limit. Update 1020, however, is notmeant to be permanent. In the disclosed embodiments, update 1020 may beimplemented in a more efficient manner by keeping policy 1010 at privateserver 1002 as opposed to having it stored on public server 1004.Private server 1002 does not need to update policies in the publicdomain or on different devices because all policy analysis anddeterminations may be performed at the private server. In someembodiments, update 1020 may modify policy 1010 to allow unused usagefrom a previous period or borrow usage from a future period for acurrent period.

Depending on the results of the determination, private server 1002 sendsresponse 1022 to public server 1004. Response 1022 may include a copy ofdocument 1012 for printing. Response 1022 may include more than oneresponse, but is shown as a single response for brevity. Public server1004 may analyze the response to ensure it is appropriate. Public server1004 forwards response 1022 to printing device 1006, which actsaccordingly. In some embodiments, public server 1004 also may sendresponse 1022 or a message associated thereto to mobile device 1008. Theresponse sent to mobile device 1008 also may include statistics orinformation regarding the status of the user's account based on ledger1003 and policy 1010.

System 1000 shows mobile device 1008 sending instructions 1014 toprinting device 1006. In some embodiments, the user may interactdirectly with printing device 1006 to process document 1012 thereon. Useof a mobile device 1008 is not required to print, copy, or scan adocument at printing device 1006 or within the public domain.

FIG. 11 depicts a policy-based printing system 1000 performing printingoperations when private server 1002 is not available according to thedisclosed embodiments. At times, private server 1002 may not beavailable to apply policy 1010 to a request 1016 to print document 1012.Connection 1005 may not be available or network 102, shown in FIG. 1,may not be available. Private server 1002 may be off-line formaintenance or other reasons so that it does not exchange any data withpublic server. The disclosed embodiments, however, allow the user toproceed with printing the document and submitted a cost reimbursementrequest. The submission and approval of the request may be done usingsystem 1000. In other scenarios, printing operations are approved butwith a temporary overage allowed by update 1020. Private server 1002 maynot be available to verify the overage is allowed according to theupdated policy.

Public server 1004 receives request 1016 from mobile device 1008 orprinting device 1006 to print document 1012. Private server 1002,however, is not connected or available to receive data or communicationsfrom public server 1004. In some embodiments, public server 1004 mayinstruct printing device 1006 to print document 1012 directly.Alternatively, public server 1004 may send a response to mobileapplication 1130 on mobile device 1008 that private server 1002 is notavailable. Mobile application 1130 may enable printing operations usingmobile device 1008 within system 1000. For example, mobile application1130 may generate request 1016 to print document 1012 then sendinstructions 1014 to print document 1012 to printing device 1006.

Mobile application 1130 may indicate that the user of mobile device 1008is allowed to print under these circumstances and submit the resultingcost for reimbursement. The disclosed embodiments, however, remove theneed for the user to physically submit any receipts or materials forreimbursement. Further, policy 1010 may be applied to determine whetherthe user is entitled for reimbursement. For example, the print job fordocument 1012 may exceed the limits set by the parameters of policy1010. The company of the user may decline to reimburse for this printingor the user may be required to submit additional materials forreimbursement. If the user is allowed to print the document according tothe policy, then payment may be issued without further requirements.

Printing device 1006 prints document 1012 as instructed by public server1004 or mobile device 1008. Document 1012 may be stored on public server1004 or, in some instances, on mobile device 1008. Private server 1002may have made document 1012 available in response to an earlier requestbut the user did not print it yet. Alternatively, public server 1004 maystore some documents for remote printing. For example, public server1004 may store in memory 1111 those documents that have been printed bythe user recently. If the user is printing documents to be handed out ata conference, then update 1020 may allow an overage situation totemporarily exceed the limits invoked by policy 1010. The document isstored on public server 1004 to allow quick access without repeatedapproval from private server 1002. Private server 1002 may place a limiton the access on public server 1004.

After printing, printing device 1006 issues a receipt 1108. Receipt 1108may be a physical item, such as a piece of paper. Alternatively, receipt1108 may be a data file encoding the payment information. The user paysfor the print job at the location of printing device 1006. For example,the user may pay at a kiosk attached to printing device 1006 or acashier serving the location of the printing device. Receipt 1108 thenis captured or received by mobile application 1130. Mobile application1130 may use camera or scanner 1104 to capture an image of receipt 1108.Mobile application 1130 then may analyze the image to determine the costfor printing document 1012. Alternatively, the user may enter the amountinto mobile application 1130 using mobile device 1008. In otherembodiments, receipt 1108 may be scanned or captured by printing device1106 and forwarded to mobile application 1130. Receipt 1108 also may bereceived in an email from the printing device. The user may input anemail address or number for mobile device 1008 to receive a text messagewith receipt 1108.

Once the cost is determined from receipt 1108, the amount for costreimbursement may be determined. In some embodiments, the actual cost ofprinting may be the amount. Alternatively, other costs may be applied tothe printing cost, such as taxes, per use fees, and the like. A costreimbursement data file 1110 is generated by mobile application 1008.Cost reimbursement data file 1110 is compatible within system 1000 forpublic server 1004 and private server 1002 to receive and process.Further, an entry may be made in mobile application 1130 that data file1110 is created and submitted. Preferably, cost reimbursement data file1110 differs from receipt 1108 in that receipt 1108 may be a capturedimage while the data file includes a specified format with data entriesto be retrieved when applying policy 1010. In some embodiments, however,receipt 1108 may be used as a cost reimbursement data file.

Public server 1004 receives cost reimbursement data file 1110. Mobileapplication 1130 may send data file 1110 corresponding to the cost setforth in receipt 1108. Public server 1004 confirms the validity of costreimbursement data file 1110 and that the user of mobile application1130 is allowed to submit receipts for reimbursement. Public server 1004also may match information within the data file to records on print jobssent to printing device 1006 to confirm that document 1012 is printed.This feature may prevent receipts not related to printing operationsfrom being submitted. Public server 1004 stores cost reimbursement datafile 1110 in memory 1111.

In some embodiments, public server 1004 may generate cost reimbursementdata file 1110. Mobile application 1130 forwards receipt 1108 inelectronic form, as captured or received by mobile device 1008.Alternatively, printing device 1006 may send receipt 1108 directly topublic server 1004. Application 1109 executes on public server 1004 toidentify the cost of the printing operations to generate costreimbursement data file 1110, as disclosed above. This feature mayalleviate the need for different mobile applications to generate datafiles that may have differing formats and information. Application 1109can generate data files in a common format acceptable to private server1002. Further, an update to the process of identifying information forthe cost reimbursement may be done once for application 1109 as opposedto a plurality of mobile applications 1130. Application 1109 mayidentify the possible cost figure by scanning receipt 1108 to identifymoney designations, such as or Y. Then, it may identify numbers aftersuch symbols to obtain the cost for the printing operations.

Public server 1004 stores cost reimbursement data file 1110 in memory1111. At some point, private server 1002 reconnects with public server1004. Private server 1002 may come back on-line to system 1000 or ismade available to exchange data within the system. Public server 1004may periodically test connection 1005 to determine that private server1002 is available. Public server 1004 may send a test message to privateserver to confirm availability. Once confirmed, public server 1004 maysend a cost reimbursement request including cost reimbursement data file1110, much like request 1016 disclosed above.

Private server 1002 receives cost reimbursement data file 1110 frompublic server 1004 now that connection 1005 is established. Privateserver 1002 applies policy 1010 along with information from ledger 1003to determine whether the cost from printing document 1012 is approved.Ledger 1003 includes entries 1120 and 1122. Private server 1002 mayinstruct ledger 1003 to determine the status of account 1123 for theuser of mobile device 1002. Entry 1120 may represent the account statusbefore receipt of the cost reimbursement request, such as when privateserver 1002 went off-line. For example, entry 1120 may relate to thetotal cost of pages printed by the user during the week. Entry 1120 alsomay represent multiple entries of actions taken by the user during theprinting period. Entry 1122 may represent the status of account 1123after applying the cost or numbers from receipt 1108 as set forth incost reimbursement data file 1110. Entry 1122 also may include thenumber of pages printed at printing device 1006.

Policy 1010 is applied to the updated entry of ledger 1003 to determineif the parameters of the policy have been exceeded or breached. Forexample, account 1123 for the user may allow a total cost for printingof S20 per week, as set forth in policy 1010. Cost reimbursement datafile 1110 includes a cost of S5. Entry 1120 may include an accumulatedcost of S17 for printing during the current week. Adding the S5 cost toentry 1120 would cause entry 1122 to exceed the S20 limit. Thus, thecost reimbursement request may be denied or extra information requiredfor approval. In some embodiments, update 1020 may allow the user toexceed the S20 limit and policy 1010 approves the submission.

If the cost reimbursement request is allowed, then private server 1002may instruct payment 1112 be provided to the user. Alternatively, thecost set forth in cost reimbursement data file 1110 may be credited toaccount 1123 for the user. If the request is denied, then message 1114may be sent to mobile device 1008 indicating the denial. Further,message 1114 may include a request for additional information in orderto approve the submission. The user may need to consult with anadministrator to provide an update 1020 to account 1123 and allow thereimbursement. Message 1114 also may be sent for an approval of thereimbursement request as well. Message 1114 may be received in mobileapplication 1130.

Ledger 1003 also may include an accumulated cost 1124 that is used todeny cost reimbursement requests based on a corporate or organizationlevel as opposed to an individual account. For example, the total costsfor printing operations of user's organization is limited so thatunplanned costs are not absorbed by the organization. The user may bereimbursed but at a later date. Private server 1002 may use entry 1122of account 1123 to determine if the total costs exceed a set limit.Accumulated cost 1124 may be updated with all costs submitted throughthe disclosed processes. If it exceeds the limit for the organization,then payment may be denied and message 1114 sent to mobile application1130.

FIG. 12 illustrates a block diagram of a mobile device 1008 for use inthe policy-based printing system 1000 according to the disclosedembodiments. Mobile device 1008 executes mobile application 1130 toenable policy-based printing operations within system 1000. Mobiledevice 1008 may include a processor 1210. Processor 1210 may be any of avariety of different types of processors suitable for mobile devices.Processor 1210 executes instructions 1212. Instructions 1212 may beloaded into processor 1210 in order to configure mobile device 1008 toperform specified functions or operations. These instructions may comefrom applications 1240 stored in memory 1290, or may be partially orwholly hardwired as part of processor 1210.

Memory 1290, such as random access memory (RAM), a flash memory, orother type of memory, is accessible by processor 1210. In someembodiments, memory 1290 may be partially comprised of read-only memory(ROM). Memory 1290 may be configured to store an operating system (OS)1230, data 1220, and applications 1240. Applications 1240 include clientagents, mobile applications, and mobile location-enabled applicationsthat may provide location-based services to the user. Data 1220 mayinclude data received from the other entities in system 1000, such asprivate server 1002, public server 1004, and printing device 1006.

Processor 1210 may be coupled, either directly or via appropriateintermediary hardware, to a display 1250 and to one or more input/output(I/O) devices 1260, such as a keypad, a touch panel sensor, amicrophone, and the like. Processor 1210 also may be coupled totransceiver 1225 that interfaces with an antenna 1275 to send andreceive data within system 1000. Transceiver 1225 may be configured totransmit and receive cellular network signals, wireless data signals, orother types of signals via antenna 1275. Mobile device 1008 may beconfigured by an application 1240 to receive and transmit specific typesof signals. Mobile device 1008 also may include a port or connectionthrough I/O devices 1260 to communicate with a device connected by awire or other physical connection. In some embodiments, a globalpositioning system (GPS) receiver 1280 also may make use of antenna 1275to receive GPS signals.

Mobile device 1008 also includes camera 1104. Camera 1104 may captureimages for use by applications 1240. Specifically, camera 1104 may actas a scanner to capture images, graphical codes, video, or other visualdata. The captured data may be used in mobile application 1130. Mobileapplication 1130 may upload the captured data as document 1012 toprivate server 1002. The appropriate application within applications1240 may control camera 1104.

Each of camera 1104, display 1250, transceiver 1225, GPS receiver 1280,processor 1210, memory 1290, I/O devices 1260, and antenna 1275 may beconnected to interconnect 1295. Alternatively, the components of mobiledevice 1008 may be connected directly or indirectly to one or more ofeach other. Interconnect 1295 may be one or more mobile devicecommunications systems such as a bus or other hardware to enablecommunication between the components of mobile device 1008.

Applications 1240 include mobile application 1130 to enable policy-basedprinting within system 1000. Mobile application 1130 on mobile device1008 may be used to authenticate the user with private server 1002 andto select a print job to print at a printing device outside the privatedomain. The disclosed embodiments may allow the user to authenticatewith private server 1002 with mobile application 1130. The user may notwant to do authentication again so the disclosed embodiments allowprinting operations to proceed without repeated authenticationinformation submissions.

Policy-based printing with mobile application 1130 also may allowprinting to occur on a printing device that does not work with privateserver 1002 or public server 1004. Mobile device 1008 may act as the“printing device” to these components within system 1000. Private server1002 applies policy 1010 to a print job request and makes document 1012available to mobile device 1008 using mobile application 1130. Thedocument is sent to public server 1004. Mobile application 1130 maydownload the document from public server 1004. Mobile application 1130may send document 1012 to printing device 1006 to print the document.

Mobile device 1008 may store receipt 1108 in memory 1290. Receipt 1108may be sent by printing device 1006 to mobile device 1008.Alternatively, receipt 1108 may be captured as an image using camera1104. Receipt 1108 is stored as data. Mobile application 1130 may accessreceipt 1108 when launched. Mobile application 1130 identifies featureswithin receipt 1108 to determine cost, number of pages printed, userinformation, printing device information, and the like. After thedesired information is identified, cost reimbursement data file 1110 isgenerated. It also may be stored in memory 1290 until forwarded topublic server 1004. Preferably, data files may have a common formatwhereas receipts may come in a variety of formats and types.

In some embodiments, the features of mobile application 1130 disclosedabove are executed by application 1109 on public server 1004. Mobileapplication 1130 may just forward receipt 1108 to public server 1004,which identifies the cost and other information in the receipt to submitin the cost reimbursement request. Mobile application 1130 may keep alog with entries of print jobs processed and sent to public server 1004.

According to the disclosed embodiments, when mobile application 1130 islaunched on mobile device 1008, the mobile device become a specialpurpose device to enable policy-based printing operations andreimbursement submissions. Processor 1210 is configured to perform theoperations to obtain and receive a document to print from private server1002. Mobile application 1130 controls the other components of mobiledevice 1008 to perform the operations disclosed in FIGS. 13 and 14below. Mobile application 1130 may send and receive data and informationto print documents and get reimbursed using a policy-based system.

FIG. 13 illustrates a flowchart 1300 for printing a document 1012 whenprivate server 1002 is not available in a policy-based system 1000according to the disclosed embodiments. Flowchart 1300 may refer tofeatures of FIGS. 1-12 for illustrative purposes. The embodimentsdisclosed by flowchart 1300, however, are not limited by FIGS. 1-12.

Step 1302 executes by generating request 1016 to print document 1012 atprinting device 1006. Request 1016 may be generated by mobileapplication 1130 or printing device 1006. The user may select document1012 to print. Step 1304 executes by receiving request 1016 at publicserver 1004. Mobile application 1130 or printing device 1006 may sendthe request. These steps occur as disclosed above.

Step 1306 executes by determining that private server 1002 is notavailable. Private server 1002 may be off-line or the network connectionis not working. Public server 1004 determines that request 1016 will notbe considered for printing document 1012. Public server 1004 may send amessage back to mobile application 1130 or printing device 1006requesting that the user indicate if he/she would still like to printthe document and pay the costs. This feature allows the user to notprint the document if he/she does not want to pay for the print job. Theuser may indicate that document 1012 is to be printed using mobileapplication 1130 or operation panel 208 on printing device 1006.

Presuming the user wants to print the document, step 1308 executesprinting document 1012 at printing device 1006. The pages are printedand collected by the user. The user may acknowledge that he/she is doneprinting. Step 1310 executes by determining the cost for printingdocument 1012. Cost may include a price per page or the price for asingle print job. The total cost is calculated and the user pays in theappropriate manner. The user may pay at printing device 1006 or a kioskassociated with the printing device. Step 1312 executes by generatingreceipt 1108 based on the cost. Receipt 1108 may be a paper receipt thatis printed out or may be an electronic data file with the information.Depending on the type of receipt, step 1314 or 1318 is executed.

Step 1314 executes by scanning receipt 1108 using camera 1104 of mobiledevice 1008. As disclosed above, the image captured by camera 1104 maybe stored on mobile device 1008. Alternatively, the user may enter datafrom receipt 1108 into mobile application 1130. Step 1316 executes byanalyzing the image of receipt 1108 or the entered data to determine thecosts incurred, number of pages printed, and other information. Mobileapplication 1130 may use optical character recognition to determine thisinformation. Alternatively, application 1109 of public server 1004 mayperform these functions based on the scanned image of receipt 1108.

Step 1318 executes if receipt 1108 is data generated by printing device1006. As the data is already in an electronic format, receipt 1108 doesnot need to be scanned. Further, a scanned image may not need to beanalyzed to determine the cost information. Thus, step 1318 proceeds tostep 1320, which executes by generating cost reimbursement data file1110. Again, this step may be performed using mobile application 1130 orapplication 1109 on public server 1004. Cost reimbursement data file1110 is in a format readable by private server 1002. Data file 1110includes the cost to print document 1012 as well as other parameters ofthe print job, such as number of pages printed, the printing devicelocation, and the like.

Step 1322 executes by storing cost reimbursement data file 1110 atpublic server 1004. If public server 1004 generates data file 1110, thenit is stored in memory 1111. If mobile application 1130 generates datafile 1110, then it may be received at public server 1004 and stored inmemory 1111. Cost reimbursement data file 1110 may stay stored untilsent by public server 1004 to private server 1002. The storage of datafile 1110 may be updated to be removed if the user personally submitsthe reimbursement request.

Step 1324 executes by determining private server 1002 is back on-line oravailable. Connection 1005 is re-established with public server 1004.Public server 1004 may authenticate connection 1005 with private server1002 as disclosed above. Step 1326 executes by submitting costreimbursement data file 1110 to private server 1002. Data file 1110 mayinclude information indicating that the reimbursement request is fromthe user. For example, mobile application 1130 may add information toreceipt 1108 or data file 1110 sent to public server 1004 thatidentifies the user as requesting payment. Using the user information,private server 1002 determines the appropriate policy to determinewhether to reimburse the user.

Step 1328 executes by applying policy 1010 on private server 1002 to thecost reimbursement request of data file 1110. This step is disclosed ingreater detail in FIG. 14. Policy 1010 determines if accepting theinformation about the print job of document 1012 would exceed anyparameters of policy 1010, such as total costs allowed or pages printedin the designated period. Ledger 1003 is used in this determination.Step 1330 executes by determining payment 1112 to reimburse the user forreceipt 1108. This step also encompasses those instances that no paymentis made to the user. “Payment” may include no payment. Step 1332executes by issuing payment 1112 or message 1114, or both. If policy1010 allows payment to be made, then the user is reimbursed from thecompany. A check or credit may be issued. If policy 1010 does not allowa payment to be made, then payment 1112 may not be issued. Instead,message 1114 is generated and sent to the user. Mobile application 1130may receive message 1114 to alert the user. Message 1114 also mayrequest more information or alert the user's attention to contact theadministrator of private server 1002 for an update to allow the charge.

FIG. 14 depicts a flowchart 1400 for applying a policy 1010 to a costreimbursement request according to the disclosed embodiments. Flowchart1400 may refer to features of FIGS. 1-13 for illustrative purposes. Theembodiments disclosed by flowchart 1400, however, are not limited byFIGS. 1-13. Step 1328 of flowchart 1300 may correspond to flowchart1400.

Step 1402 executes by receiving cost reimbursement data file 1110 atprivate server 1002. Private server 1002 may verify data file 1110 inthat it is an adequate request for reimbursement. For example, data file1110 may be analyzed to determine if it includes cost information oruser information that allows it to be adequately processed. Step 1404executes by associating policy 1010 with cost reimbursement data file1110. Private server 1002 may identify the user submitting the requestand retrieve the associated policy to apply.

Step 1406 executes by updating entries within ledger 1003 with theinformation from cost reimbursement data file 1110. As disclosed above,entry 1120 may represent the accumulated cost or pages printed for theperiod specified by policy 1010. The information provided in data fileis added to this amount to produce entry 1122. The data of entry 1122 iscompared against the parameters of policy 1010, as disclosed above. Step1408 executes by determining whether policy 1010 allows thereimbursement of the print job for printing document 1012 at printingdevice 1006. If one of the policy's parameters is exceeded, then theuser may not be reimbursed for the cost of printing. The disclosedembodiments also may take into account any update 1020 to policy 1010that allows for overage conditions under certain circumstances.

In some embodiments, policy 1010 may indicate that some costs arereimbursed while others are not. For example, a print job at printingdevice may cost S5. Entry 1120 indicates that the user already used S17in printing costs for the period, such as a week. Policy 1010 sets fortha parameter to limit printing costs per week as S20. Thus, the user maybe reimbursed for S3 according to policy 1010. In other embodiments,update 1020 may allow printing costs up to S25 for the day that document1012 was printed. Policy 1010 allows the full cost to be reimbursed.

If step 1408 is yes, then step 1410 executes by analyzing accumulatedcost 1124 to determine if it exceeds a cost limit imposed on theorganization that employs or allows the user to print. There may be atotal cost for users in the organization or group that is not beexceeded. This feature may place a limit on updates 1020 or changesallowed to the printing parameters of policy 1010. Step 1412 executes bydetermining whether to allow the cost reimbursement based on accumulatedcost 1124. If yes, then step 1414 executes by accepting the costreimbursement request and issuing payment or credit to the user. Step1416 executes by updating ledger 1003 accordingly. Entry 1122 becomesthe entry with the latest information for account 1123 and accumulatedcost 1124 is increased accordingly.

If step 1408 or step 1412 is no, then step 1418 executes by denying thecost reimbursement request. As disclosed above, a message 1114 may besent to the user. The disclosed embodiments also may send a message toan administrator to see if and update 1020 can be issued to allowreimbursement. Step 1418 also may request that the cost reimbursementrequest be resubmitted.

Thus, the disclosed embodiments allow a flexible policy to be appliedthat permits the user to pay at the store or printing location when thepolicy cannot validate the print request. The mobile application or thepublic server automatically generates the cost reimbursement request.The public server submits the request to the user's company to processthe accounting and reimbursement of the cost. This feature may bedesirable when the user is traveling extensively and cannot submitreceipts at the company. Further, real time tracking of printingaccounts may be realized so that costs are contained and updated.

As will be appreciated by one skilled in the art, the present inventionmay be embodied as a system, method or computer program product.Accordingly, the present invention may take the form of an entirelyhardware embodiment, an entirely software embodiment (includingfirmware, resident software, micro-code, etc.) or an embodimentcombining software and hardware aspects that may all generally bereferred to herein as a “circuit,” “module” or “system.” Furthermore,the present invention may take the form of a computer program productembodied in any tangible medium of expression having computer-usableprogram code embodied in the medium.

Any combination of one or more computer usable or computer readablemedium(s) may be utilized. The computer-usable or computer-readablemedium may be, for example but not limited to, an electronic, magnetic,optical, electromagnetic, infrared, or semiconductor system, apparatus,device, or propagation medium. More specific examples (a non-exhaustivelist) of the computer-readable medium would include the following: anelectrical connection having one or more wires, a portable computerdiskette, a hard disk, a random access memory (RAM), a read-only memory(ROM), an erasable programmable read-only memory (EPROM or Flashmemory), an optical fiber, a portable compact disc read-only memory(CD-ROM), an optical storage device, a transmission media such as thosesupporting the Internet or an intranet, or a magnetic storage device.Note that the computer-usable or computer-readable medium could even bepaper or another suitable medium upon which the program is printed, asthe program can be electronically captured, via, for instance, opticalscanning of the paper or other medium, then compiled, interpreted, orotherwise processed in a suitable manner, if necessary, and then storedin a computer memory.

Computer program code for carrying out operations of the presentinvention may be written in any combination of one or more programminglanguages, including an object oriented programming language such asJava, Smalltalk, C++ or the like and conventional procedural programminglanguages, such as the “C” programming language or similar programminglanguages. The program code may execute entirely on the user's computer,partly on the user's computer, as a stand-alone software package, partlyon the user's computer and partly on a remote computer or entirely onthe remote computer or server. In the latter scenario, the remotecomputer may be connected to the user's computer through any type ofnetwork, including a local area network (LAN) or a wide area network(WAN), or the connection may be made to an external computer (forexample, through the Internet using an Internet Service Provider).

The present invention is described with reference to flowchartillustrations and/or block diagrams of methods, apparatus (systems) andcomputer program products according to embodiments of the invention. Itwill be understood that each block of the flowchart illustrations and/orblock diagrams, and combinations of blocks in the flowchartillustrations and/or block diagrams, can be implemented by computerprogram instructions. These computer program instructions may beprovided to a processor of a general purpose computer, special purposecomputer, or other programmable data processing apparatus to produce amachine, such that the instructions, which execute via the processor ofthe computer or other programmable data processing apparatus, createmeans for implementing the functions/acts specified in the flowchartand/or block diagram block or blocks.

The flowchart and block diagrams in the figures illustrate thearchitecture, functionality, and operation of possible implementationsof systems, methods and computer program products according to variousembodiments of the present invention. In this regard, each block in theflowchart or block diagrams may represent a module, segment, or portionof code, which comprises one or more executable instructions forimplementing the specified logical function(s). It should also be notedthat, in some alternative implementations, the functions noted in theblock may occur out of the order noted in the figures. For example, twoblocks shown in succession may, in fact, be executed substantiallyconcurrently, or the blocks may sometimes be executed in the reverseorder, depending upon the functionality involved. It will also be notedthat each block of the block diagrams and/or flowchart illustration, andcombinations of blocks in the block diagrams and/or flowchartillustration, can be implemented by special purpose hardware-basedsystems that perform the specified functions or acts, or combinations ofspecial purpose hardware and computer instructions.

The terminology used herein is for the purpose of describing particularembodiments only and is not intended to be limiting of the invention. Asused herein, the singular forms “a,” “an” and “the” are intended toinclude plural forms as well, unless the context clearly indicatesotherwise. It will be further understood that the terms “comprises”and/or “comprising,” when used in this specification, specific thepresence of stated features, integers, steps, operations, elements,and/or components, but do not preclude the presence or addition of oneor more other features, integers, steps, operations, elements,components, and/or groups thereof.

Embodiments may be implemented as a computer process, a computing systemor as an article of manufacture such as a computer program product ofcomputer readable media. The computer program product may be a computerstorage medium readable by a computer system and encoding a computerprogram instructions for executing a computer process. When accessed,the instructions cause a processor to enable other components to performthe functions disclosed above.

The corresponding structures, material, acts, and equivalents of allmeans or steps plus function elements in the claims below are intendedto include any structure, material or act for performing the function incombination with other claimed elements are specifically claimed. Thedescription of the present invention has been presented for purposes ofillustration and description, but is not intended to be exhaustive orlimited to the invention in the form disclosed. Many modifications andvariations will be apparent to those of ordinary skill without departingfrom the scope and spirit of the invention. The embodiment was chosenand described in order to best explain the principles of the inventionand the practical application, and to enable others of ordinary skill inthe art to understand the invention for embodiments with variousmodifications as are suited to the particular use contemplated.

One or more portions of the disclosed networks or systems may bedistributed across one or more multi-functional printer (MFP) systemscoupled to a network capable of exchanging information and data. Variousfunctions and components of the MFP system may be distributed acrossmultiple client computer platforms, or configured to perform tasks aspart of a distributed system. These components may be executable,intermediate or interpreted code that communicates over the networkusing a protocol. The components may have specified addresses or otherdesignators to identify the components within the network.

It will be apparent to those skilled in the art that variousmodifications to the disclosed may be made without departing from thespirit or scope of the invention. Thus, it is intended that the presentinvention covers the modifications and variations disclosed aboveprovided that these changes come within the scope of the claims andtheir equivalents.

1. (canceled)
 2. (canceled)
 3. (canceled)
 4. (canceled)
 5. (canceled) 6.(canceled)
 7. (canceled)
 8. A method for a printing system, the methodcomprising: printing a document at a printing device; determining a costfor the printed document; receiving the cost using a mobile applicationon a mobile device; sending the cost to a public server; generating acost reimbursement data file according to the cost at the public server;submitting the cost reimbursement data file to a private server whenconnected to the public server; associating the cost reimbursement datafile to a ledger at the private server, wherein the ledger correspondsto a policy for using the printing device; applying the policy to thecost reimbursement based on information from the ledger, wherein thepolicy is stored on the private server; and determining a payment forprinting the document according to the policy.
 9. The method of claim 8,wherein the cost for the printed document includes a receipt.
 10. Themethod of claim 9, further comprising scanning the receipt to determinethe cost.
 11. The method of claim 10, further comprising analyzing thescanned receipt to determine the cost for printing the document.
 12. Themethod of claim 8, further comprising determining that the privateserver is not connected to the public server.
 13. The method of claim 9,further comprising executing an application on the public server togenerate the cost reimbursement data file.
 14. The method of claim 9,wherein receiving the cost includes receiving data from the printingdevice for the mobile application.
 15. A method for using a policy-basedprinting system, the method comprising: generating a request to print adocument at a printing device; receiving the request at a public server;determining that a private server to process the request is notavailable; printing the document at the printing device; determining acost for the printed document; receiving the cost using a mobileapplication on a mobile device; generating a cost reimbursement datafile according to the cost; submitting the cost reimbursement data fileto the private server when connected to the public server; associatingthe cost reimbursement data file to a ledger at the private server,wherein the ledger corresponds to a policy for using the printingdevice; applying the policy to the cost reimbursement data file based oninformation from the ledger, wherein the policy is stored on the privateserver; and determining a payment for printing the document according tothe policy.
 16. The method of claim 15, further comprising scanning areceipt of the cost using the mobile device.
 17. The method of claim 15,wherein generating the cost reimbursement data file includes generatingthe cost reimbursement file using the mobile application.
 18. The methodof claim 15, wherein generating the cost reimbursement data fileincludes generating the cost reimbursement file at the public server.19. The method of claim 15, further comprising applying the policy tothe request if the private server is connected to the public server. 20.The method of claim 15, wherein determining the payment includesdetermining that no payment is allowed by the policy or the ledger. 21.A method for a printing system, the method comprising: determining acost for the printed document; generating a cost reimbursement data fileaccording to the cost; receiving the cost reimbursement data file at apublic server; submitting the cost reimbursement data file to a privateserver when connected to the public server; associating the costreimbursement data file to a ledger at the private server, wherein theledger corresponds to a policy for printing the printed document;applying the policy to the cost reimbursement based on information fromthe ledger; and determining a payment for printing the documentaccording to the policy.
 22. The method of claim 21, further comprisingsending the cost reimbursement data file to the public server.
 23. Themethod of claim 21, wherein the cost for the printed document includes areceipt.
 24. The method of claim 23, further comprising scanning thereceipt to determine the cost.
 25. The method of claim 24, furthercomprising analyzing the scanned receipt to determine the cost forprinting the document.
 26. The method of claim 21, further comprisingdetermining that the private server is connected to the public server.27. The method of claim 1 further comprising storing the costreimbursement data file at the public server.